This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          E7Pyf5FdO3rcPV4r5Gm+B1KW9ygrcYfZ3Iklm1zvssA=
Subject key identifier:   20:FC:FB:07:C5:18:A9:AB:7F:40:37:5B:51:9F:D8:CD:76:0F:36:69
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       1A9336286FB6AA301C25E00D71459457E0EF80BA
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:26 +0000
ROA not before:           Tue 06 Jan 2026 20:50:26 +0000
ROA not after:            Tue 05 Jan 2027 20:55:26 +0000
asID:                     262191
IP address blocks:        190.131.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:93:36:28:6f:b6:aa:30:1c:25:e0:0d:71:45:94:57:e0:ef:80:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:26 2026 GMT
            Not After : Jan  5 20:55:26 2027 GMT
        Subject: CN=20FCFB07C518A9AB7F40375B519FD8CD760F3669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:1c:58:c3:f1:53:3f:85:a7:e6:cb:19:ce:
                    8c:7a:f2:4f:66:52:39:cd:4e:39:4b:5b:22:a0:ec:
                    ab:f1:25:d0:79:0b:84:db:9d:e2:75:c3:ee:9d:ec:
                    a7:76:93:91:e9:80:e4:ed:c5:43:0b:b1:19:7d:ec:
                    e6:cd:17:de:3b:e4:b6:85:f2:ef:7b:2d:4e:bd:cf:
                    a9:df:13:bb:ad:e8:05:53:27:1a:c9:60:85:3c:a3:
                    f7:5e:11:d4:a4:99:c7:2c:f8:18:67:ce:56:af:a5:
                    58:93:0c:4f:bf:c3:d5:70:08:09:21:a0:1c:ae:40:
                    65:78:41:48:91:68:26:3d:a2:7f:45:c8:c7:32:ea:
                    96:26:e1:ac:67:00:7e:49:ca:7d:09:57:32:92:a6:
                    d0:43:7e:92:54:0a:11:c4:02:da:2c:45:11:0d:89:
                    1b:70:29:bd:2e:f6:06:eb:03:95:13:bb:e5:88:79:
                    4b:9c:8c:16:2a:00:ca:aa:d4:23:ec:67:d9:d9:3b:
                    55:6e:3a:40:f9:d9:62:2b:e1:ae:02:19:7c:f4:da:
                    34:01:0c:ec:63:e6:2f:97:3f:58:27:eb:5f:4c:64:
                    02:4a:d3:76:92:7a:1b:78:78:58:4f:d9:d0:9b:5a:
                    53:c5:90:c6:1b:12:e9:ca:a6:2c:c5:28:84:1e:42:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:FB:07:C5:18:A9:AB:7F:40:37:5B:51:9F:D8:CD:76:0F:36:69
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:84:ba:5c:89:50:c8:2d:9d:96:ef:c7:18:92:2b:ac:d2:
         68:10:e8:fb:7d:44:e3:31:6c:38:f0:78:6e:a9:c1:a1:23:7b:
         ee:e3:8f:c4:e4:f6:ee:b7:42:5c:43:00:35:99:74:8a:80:41:
         2c:d7:bd:c0:99:cd:6c:c2:ca:4b:52:41:6a:8f:67:35:bf:62:
         ab:92:e8:4e:03:90:1b:f1:4d:af:42:e2:51:c3:4b:97:98:6c:
         83:44:9c:06:3c:23:0e:27:43:69:25:34:2f:15:06:2f:6e:ad:
         f8:d0:6f:ee:ee:25:2d:3a:92:1f:34:1d:b5:ce:d7:44:5b:22:
         1f:f1:21:90:73:38:42:85:5b:b4:ba:ba:db:79:03:fb:43:09:
         e1:65:58:82:a3:de:c9:53:d1:8b:db:8d:3d:91:5b:95:2b:69:
         64:46:a3:e7:ef:26:6f:c5:85:76:d3:e9:ed:d2:f5:b2:fd:0e:
         41:db:66:54:c8:14:43:4b:33:f6:77:81:e0:8d:51:7d:09:68:
         a8:10:fc:aa:20:9d:b6:46:26:3a:69:07:a1:c0:26:5c:1d:7b:
         89:6c:96:eb:5a:eb:5a:91:a3:d8:81:32:6d:37:a5:cd:bb:50:
         c1:96:81:3f:07:86:ee:07:2b:25:e4:62:71:a5:f7:8d:6e:7e:
         e9:2d:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:39:01 2026 by rpki-client